Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Target
RtkAudUService64.exe
Size
836KB
MD5
b8d8df66e0f378172c1ad01dd551874c
SHA1
51772f0917cdf6c23b88639e480a55afdf01e7f8
SHA256
e1cd0f189e77beaa7d18834d2ede59aa10fbb97465daebe32de2dc347494149b
SHA512
59273dad082a47df879421af3685baa58b0a942d87c9a97d3cd94e0fc59c96df663fcfb6c1762e6a7be5a5898ec34023126a54f430a84a7bea8ea6202a572a19
SSDEEP
12288:8EJh59Gi4SWWmnASZ3zTgoHUAnoiMj77CiW7ePF0Yp+Pfhv6jqJ:8WhXGqWWmdzTgrAqyiyDfh6qJ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\Users\Chunyung\source\repos\RtkAudUService\Release\x64\RtkAudUService64.pdb
LPSAFEARRAY_UserUnmarshal64
LPSAFEARRAY_UserMarshal
BSTR_UserMarshal
BSTR_UserSize64
LPSAFEARRAY_UserSize64
BSTR_UserMarshal64
BSTR_UserUnmarshal
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal64
LPSAFEARRAY_UserSize
VariantCopy
BSTR_UserFree
BSTR_UserFree64
BSTR_UserSize
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayPutElement
SafeArrayCreateVector
VariantClear
VariantInit
SysFreeString
SysAllocString
RpcEpRegisterW
RpcServerListen
RpcServerUnregisterIf
RpcEpUnregister
RpcBindingVectorFree
RpcServerRegisterIf3
NdrServerCall2
RpcServerUseProtseqEpW
NdrClientCall3
RpcServerInqBindings
NdrServerCallAll
CoUninitialize
CoInitializeEx
PropVariantClear
StringFromGUID2
CLSIDFromString
CoTaskMemFree
CoFreeUnusedLibrariesEx
CoSetProxyBlanket
CoInitializeSecurity
CoCreateInstance
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetProcessHeap
HeapDestroy
lstrcmpW
lstrlenW
FileTimeToLocalFileTime
GetFileAttributesW
CreateFileW
QueryDosDeviceW
DeleteFileW
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetModuleHandleW
LoadStringW
FreeLibrary
GetModuleHandleA
GetProcAddress
FindResourceExW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
LoadLibraryExW
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
WaitForSingleObjectEx
SetWaitableTimer
CreateMutexW
CreateEventW
CreateEventExW
InitializeCriticalSectionEx
SetEvent
ResetEvent
CancelWaitableTimer
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
LoadLibraryW
FindResourceW
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
OpenProcess
IsProcessorFeaturePresent
GetCurrentProcess
TlsAlloc
TlsSetValue
ProcessIdToSessionId
TlsGetValue
TerminateProcess
CreateProcessAsUserW
GetCurrentThreadId
GetCurrentProcessId
GetExitCodeProcess
TlsFree
CreateProcessW
CreateThread
OpenProcessToken
GetStartupInfoW
CloseHandle
OutputDebugStringA
IsDebuggerPresent
OutputDebugStringW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegGetKeySecurity
RegSetKeySecurity
RegSetValueExW
RegCreateKeyExW
RegGetValueW
RegNotifyChangeKeyValue
RegEnumValueW
Sleep
SetLastError
GetLastError
UnhandledExceptionFilter
RaiseException
SetUnhandledExceptionFilter
SHGetSpecialFolderPathW
SHGetFolderPathW
GetProfileIntW
GetLocalTime
GetSystemDirectoryW
GetTickCount
GetSystemTimeAsFileTime
RegCreateKeyW
GetTempPathW
LCMapStringW
FormatMessageW
LocalFree
LocalAlloc
LocalSize
CreateWaitableTimerW
WaitForMultipleObjects
WTSGetActiveConsoleSessionId
GetSystemPowerStatus
DuplicateTokenEx
SetTokenInformation
AdjustTokenPrivileges
AddAccessAllowedAceEx
InitializeAcl
CreateWellKnownSid
AllocateAndInitializeSid
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetLengthSid
SetSecurityDescriptorDacl
AddAce
GetAclInformation
GetAce
FreeSid
ConvertSidToStringSidW
DeviceIoControl
DeriveCapabilitySidsFromName
SetEntriesInAclW
RegSetKeyValueW
BCryptImportKeyPair
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptOpenAlgorithmProvider
BCryptEncrypt
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
OpenSCManagerW
CreateServiceW
OpenServiceW
DeleteService
CloseServiceHandle
ControlService
QueryServiceStatus
QueryServiceStatusEx
EncodePointer
DecodePointer
QueryFullProcessImageNameW
K32GetModuleBaseNameW
K32EnumProcessModules
K32EnumProcesses
FindPackagesByPackageFamily
mmioSeek
mmioAscend
mmioClose
mmioOpenW
mmioCreateChunk
mmioDescend
mmioRead
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioWrite
Process32NextW
CreateToolhelp32Snapshot
Process32FirstW
LookupPrivilegeValueW
CreateEnvironmentBlock
ReadProcessMemory
SubmitThreadpoolWork
CreateThreadpoolWork
GetTraceLoggerHandle
GetTraceEnableLevel
TraceMessage
GetTraceEnableFlags
RegisterTraceGuidsW
SetupDiGetDevicePropertyW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
WTSQueryUserToken
WTSRegisterSessionNotification
WriteProfileStringW
WinExec
SetTimer
SetWinEventHook
FindWindowExW
SendMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterDeviceNotificationW
ShowWindow
RegisterClassW
UnhookWindowsHookEx
CallNextHookEx
SendInput
LoadCursorW
LoadIconW
DefWindowProcW
GetClassNameA
KillTimer
UnregisterDeviceNotification
SetWindowsHookExW
DispatchMessageW
UnhookWinEvent
DeregisterEventSource
RegisterEventSourceW
ReportEventW
GetUserNameW
CoInitialize
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW
NtQueryInformationProcess
AccessibleObjectFromEvent
InternetCloseHandle
InternetOpenW
InternetReadFile
InternetOpenUrlW
_set_app_type
_seh_filter_exe
_configure_wide_argv
_errno
_get_wide_winmain_command_line
_initialize_onexit_table
exit
_invalid_parameter_noinfo
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
_register_onexit_function
_cexit
abort
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
terminate
_initialize_wide_environment
wcscpy_s
islower
_wcsupr_s
wcstok_s
isupper
strcpy_s
iswspace
wcscat_s
wcsncmp
_wcsicmp
towupper
strcmp
wmemcpy_s
strcspn
wcsnlen
__strncnt
_wcsdup
fflush
fsetpos
__stdio_common_vswprintf
__stdio_common_vswprintf_s
ungetwc
fputc
fputs
__stdio_common_vfwprintf
__stdio_common_vfprintf_s
__stdio_common_vfprintf
fputwc
_wfsopen
fseek
fputws
fgets
fclose
fgetpos
fgetc
_fseeki64
__stdio_common_vsprintf
_get_stream_buffer_pointers
fgetwc
__stdio_common_vsprintf_s
_flushall
fwrite
__acrt_iob_func
ungetc
__p__commode
_wfopen_s
setvbuf
_set_fmode
free
malloc
_free_base
realloc
_recalloc
_malloc_base
calloc
_calloc_base
_set_new_mode
_callnewh
wcstoul
_wtoi
wcstol
powf
asinf
atan2f
log10f
frexp
__setusermatherr
localeconv
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
_configthreadlocale
__pctype_func
setlocale
_unlock_locales
_lock_locales
_mbschr
_ismbblead
_mbsstr
PathFileExistsW
RtlUnwindEx
RtlPcToFileHeader
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
InitializeSListHead
_lock_file
_unlock_file
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ